WebScarab-NG is a really amazing tool that Brian introduced me to a few months back. It’s essentially a local proxy which you can use to capture the full details of HTTP requests traveling through it. It listens by default on port 8008 on your local address, and you can configure any software to use that port as a proxy.
If you choose, you can even configure it to intercept requests and responses, and it allow you to modify the data on the fly - really useful when you want to test fault circumstances.
1 response so far ↓
1 brian // May 11, 2008 at 1:49 pm
I’m glad you like the tool. I’ve found it useful when trying to figure out some issues in the past.
The tool was a big part of the training that I took last year. Scarab combined with the WebGoat site let us practice our white hat security skills.
It was an eye opener to what is possible to do as a black hat when attacking a site.
Leave a Comment